Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
File:                     ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft (raw, json)
Hash identifier:          BqGVpshkmUdRUikIMK0HN2RVAkblGt5KuqEy6zkOgAM=
Subject key identifier:   49:F1:05:6D:81:A6:DD:DA:79:6F:16:D7:08:DE:6E:E6:66:D2:99:0F
Authority key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
Certificate issuer:       /CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Certificate serial:       01963BE60C42563873672DF64F0532810FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
Manifest number:          13F9
Signing time:             Wed 16 Apr 2025 00:00:54 +0000
Manifest this update:     Wed 16 Apr 2025 00:00:54 +0000
Manifest next update:     Thu 17 Apr 2025 00:00:54 +0000
Files and hashes:         1: A3dj5P_xKMDJjc-IVzSyCe735rY.roa (hash: +ztHeCTdZHE/HgThAQ7CjX7HR6VG5JPZ0GRqUwHJv5U=)
                          2: ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl (hash: gZ50eM2/9qoKk3fFVpj7tFP7gVF6Y/zWXT8YDUwcNOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3b:e6:0c:42:56:38:73:67:2d:f6:4f:05:32:81:0f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
        Validity
            Not Before: Apr 16 00:00:54 2025 GMT
            Not After : Apr 17 00:00:54 2025 GMT
        Subject: CN=49f1056d81a6ddda796f16d708de6ee666d2990f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:da:a0:9d:93:5a:51:28:5f:bb:07:9d:19:
                    e2:96:ad:11:2c:34:b5:03:fc:e9:e7:c3:2b:be:a4:
                    85:53:cc:cd:e6:c6:3d:20:d7:4d:d6:83:84:77:7a:
                    9b:2a:49:55:61:7d:e1:90:50:ba:8c:03:93:c4:6a:
                    92:85:82:c2:52:b6:6f:1a:fe:27:2b:bf:a2:b3:eb:
                    fc:5a:ab:48:f7:ba:2b:a7:38:50:cd:3a:50:18:1f:
                    a0:17:37:8a:ee:6d:d3:f5:df:46:62:c2:34:98:b7:
                    a5:2f:f9:c5:22:6b:e8:79:8e:f0:da:93:10:46:48:
                    c5:d9:38:8e:2c:de:05:f9:54:0f:62:56:5f:72:87:
                    84:d6:09:50:cc:ff:d7:a1:68:5a:52:4f:ec:2f:f0:
                    40:49:46:bb:01:5b:64:91:f4:54:ff:37:80:23:a0:
                    f4:a2:7e:bd:dc:f5:87:ab:7f:6e:1b:01:8b:9f:e7:
                    c8:31:75:82:25:24:6d:cd:21:6b:1e:8d:d9:fb:90:
                    a5:6a:22:da:d7:14:60:f6:5e:22:5b:ed:b9:78:fc:
                    fe:ed:0b:c6:0e:5c:16:17:3f:08:eb:e7:62:19:88:
                    3d:00:66:64:91:b6:86:f2:85:e5:2b:d1:ca:25:a2:
                    00:92:e0:fe:d4:05:cf:76:c7:87:4e:07:2a:76:8e:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F1:05:6D:81:A6:DD:DA:79:6F:16:D7:08:DE:6E:E6:66:D2:99:0F
            X509v3 Authority Key Identifier:
                keyid:64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:22:ad:05:61:e0:cc:4f:f7:ba:6e:4f:fb:9c:0c:4a:0e:fe:
         94:73:bc:d8:d0:70:d6:22:21:98:18:8a:eb:6a:75:b3:85:39:
         59:9d:7a:47:86:7b:92:ba:1d:fb:8a:7e:e3:38:29:6b:73:ad:
         09:1d:8b:48:65:34:f0:07:fc:53:7e:38:3f:5f:2b:11:f6:89:
         1b:6d:a5:fa:ff:df:5c:18:42:8a:fe:c4:45:28:80:4d:bb:c8:
         bd:19:27:c7:f2:a2:e5:39:bd:b8:32:13:ba:a7:ec:f4:d3:a5:
         06:b8:e7:05:4a:47:72:8a:d4:d7:b3:f5:39:c9:b0:2b:e0:0c:
         15:4c:cb:16:34:0a:1f:f8:58:85:bc:96:3b:4a:dc:6a:45:1a:
         12:c0:3c:fd:95:39:b2:13:49:9e:0d:96:fc:1c:46:0e:63:02:
         10:74:c0:27:7a:e7:59:b7:40:f6:7b:a9:a1:ce:a6:47:f4:13:
         d0:15:0b:0f:05:dd:59:1c:fb:fa:8f:75:02:8e:a9:f4:3e:03:
         79:de:be:49:04:c1:eb:95:50:16:8e:fb:a3:35:6e:d0:63:ec:
         cb:7d:45:6f:9e:a6:db:fe:3b:a2:e0:59:1e:11:e7:d6:4d:0e:
         25:a1:8f:a0:5e:e9:c6:4c:ae:35:4f:9a:fb:7d:28:51:d7:1b:
         70:a1:7d:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY75gxCVjhzZy32TwUygQ/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzUzMGI0ZmE4ODk5YTMwYmIyZTY1YjkzZjAxMTlmZGE5
YmMwNWQwHhcNMjUwNDE2MDAwMDU0WhcNMjUwNDE3MDAwMDU0WjAzMTEwLwYDVQQD
Eyg0OWYxMDU2ZDgxYTZkZGRhNzk2ZjE2ZDcwOGRlNmVlNjY2ZDI5OTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBHaoJ2TWlEoX7sHnRnilq0RLDS1
A/zp58MrvqSFU8zN5sY9INdN1oOEd3qbKklVYX3hkFC6jAOTxGqShYLCUrZvGv4n
K7+is+v8WqtI97orpzhQzTpQGB+gFzeK7m3T9d9GYsI0mLelL/nFImvoeY7w2pMQ
RkjF2TiOLN4F+VQPYlZfcoeE1glQzP/XoWhaUk/sL/BASUa7AVtkkfRU/zeAI6D0
on693PWHq39uGwGLn+fIMXWCJSRtzSFrHo3Z+5ClaiLa1xRg9l4iW+25ePz+7QvG
DlwWFz8I6+diGYg9AGZkkbaG8oXlK9HKJaIAkuD+1AXPdseHTgcqdo4M7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnxBW2Bpt3aeW8W1wjebuZm0pkPMB8GA1UdIwQY
MBaAFGR1MLT6iJmjC7LmW5PwEZ/am8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81N2Y1MTItYTI5Zi00NGVkLWE3YTEt
MGU3Y2JiY2M2MmQwLzEvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81N2Y1MTItYTI5Zi00NGVkLWE3YTEtMGU3Y2JiY2M2MmQw
LzEvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyKtBWHg
zE/3um5P+5wMSg7+lHO82NBw1iIhmBiK62p1s4U5WZ16R4Z7krod+4p+4zgpa3Ot
CR2LSGU08Af8U344P18rEfaJG22l+v/fXBhCiv7ERSiATbvIvRknx/Ki5Tm9uDIT
uqfs9NOlBrjnBUpHcorU17P1OcmwK+AMFUzLFjQKH/hYhbyWO0rcakUaEsA8/ZU5
shNJng2W/BxGDmMCEHTAJ3rnWbdA9nupoc6mR/QT0BULDwXdWRz7+o91Ao6p9D4D
ed6+SQTB65VQFo77ozVu0GPsy31Fb56m2/47ouBZHhHn1k0OJaGPoF7pxkyuNU+a
+30oUdcbcKF9tQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:40:59 2025 by rpki-client